Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
File: pW4itGIL0EL3OiqWIfDJJH1RJIo.cer (raw, json)
Hash identifier: epx1ACtUz0Bt3QJfnt+MzFkv4kKNSN3NWo9DH/wuYuo=
Subject key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01981D41131A423E61C1872C556CB96931D0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 18 Jul 2025 11:17:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35691
IP: 185.185.108.0/22
IP: 2a09:c040::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1d:41:13:1a:42:3e:61:c1:87:2c:55:6c:b9:69:31:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 18 11:17:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:61:5f:43:d9:f3:42:0e:17:ed:b9:c0:1e:
77:5b:d8:55:ab:cb:b7:11:ff:b6:44:92:ec:7a:d6:
d5:41:39:bd:13:dd:aa:c3:23:8a:20:3e:ef:c8:74:
a8:85:ae:42:ef:b9:c7:7c:0f:44:c8:d4:4f:1d:88:
7d:70:99:5a:67:01:92:cf:d0:69:0f:31:06:44:8a:
52:11:b4:e7:22:01:c1:22:c0:5d:89:7b:31:35:8c:
2c:92:2c:a3:1f:d4:b1:c3:cf:f0:11:72:cb:9c:7c:
d6:c0:9c:9f:e1:a0:9b:c5:46:36:75:ca:69:08:a3:
be:22:1b:89:2a:bc:41:65:71:c4:39:2a:64:42:53:
ef:0d:92:be:5f:60:37:04:52:a9:ab:57:51:50:7a:
79:4d:7c:5e:91:55:8c:98:97:b9:cf:bf:94:d2:14:
4a:4c:4c:e0:20:a8:62:6a:da:39:13:aa:c4:11:66:
cc:e8:15:3e:b5:e4:07:c6:06:28:92:3e:28:66:05:
6c:f7:3e:50:12:c5:a5:24:8d:fa:80:d0:13:ea:7d:
03:6c:12:97:b5:fc:36:cd:4b:70:3b:16:82:80:28:
0e:91:53:95:f2:e8:1b:f4:55:21:48:fd:80:ba:d2:
40:90:47:8b:50:03:2d:c2:5b:23:10:cc:ce:4a:50:
ea:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.108.0/22
IPv6:
2a09:c040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35691
Signature Algorithm: sha256WithRSAEncryption
22:c6:68:07:e2:db:2e:46:d5:f8:09:7a:b7:b3:d5:13:76:86:
19:2b:75:0d:8d:d4:43:2c:c5:8a:c5:90:ab:35:1c:2d:51:a1:
67:c8:78:45:fa:a2:0c:ba:00:92:da:42:61:66:4d:08:e5:cc:
89:10:ca:e2:2e:2b:7a:d4:5e:6b:8a:44:1f:f8:72:cc:ba:e2:
dc:a4:76:75:48:ab:f4:b5:35:6a:4b:57:38:c1:b8:35:99:db:
26:c2:8f:22:b4:53:2f:33:53:aa:9b:0f:07:12:9e:fb:d6:ef:
f3:21:f4:46:1f:53:c6:46:de:74:1a:64:a2:72:9e:42:20:d6:
5d:97:f6:a7:c3:a8:91:3c:c5:a0:3d:9d:66:e1:be:19:81:8e:
9c:54:ef:6e:16:ec:cb:4f:4c:b3:12:66:cf:03:ee:ec:87:5b:
6b:d8:47:47:13:33:14:6e:54:97:fb:ef:4a:bc:8d:c0:74:a5:
c8:51:2b:68:55:bc:1b:19:db:af:28:4b:6d:e7:44:87:44:43:
14:33:58:b3:7e:22:00:dc:0f:12:42:7b:e0:d7:82:13:05:27:
f9:f1:ff:dc:8e:15:55:b0:a6:09:e0:ff:67:83:5a:9d:75:84:
96:0b:07:db:59:bc:8f:4c:cf:d0:91:fa:4a:32:84:2e:35:fe:
65:f1:93:bd
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZgdQRMaQj5hwYcsVWy5aTHQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNzE4MTExNzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTZlMjJiNDYyMGJkMDQyZjczYTJhOTYyMWYwYzkyNDdkNTEyNDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0axhX0PZ80IOF+25wB53W9hVq8u3
Ef+2RJLsetbVQTm9E92qwyOKID7vyHSoha5C77nHfA9EyNRPHYh9cJlaZwGSz9Bp
DzEGRIpSEbTnIgHBIsBdiXsxNYwskiyjH9Sxw8/wEXLLnHzWwJyf4aCbxUY2dcpp
CKO+IhuJKrxBZXHEOSpkQlPvDZK+X2A3BFKpq1dRUHp5TXxekVWMmJe5z7+U0hRK
TEzgIKhiato5E6rEEWbM6BU+teQHxgYokj4oZgVs9z5QEsWlJI36gNAT6n0DbBKX
tfw2zUtwOxaCgCgOkVOV8ugb9FUhSP2AutJAkEeLUAMtwlsjEMzOSlDqqQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFKVuIrRiC9BC9zoqliHwySR9USSKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5L2I3ODE4
ZC0zMjk4LTQwNjktODI5MC1jNmUxY2ZkNjA2NjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvYjc4MThk
LTMyOTgtNDA2OS04MjkwLWM2ZTFjZmQ2MDY2MS8xL3BXNGl0R0lMMEVMM09pcVdJ
ZkRKSkgxUkpJby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCublsMA0EAgACMAcDBQMqCcBAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCLazANBgkqhkiG9w0BAQsFAAOCAQEAIsZoB+LbLkbV
+Al6t7PVE3aGGSt1DY3UQyzFisWQqzUcLVGhZ8h4RfqiDLoAktpCYWZNCOXMiRDK
4i4retRea4pEH/hyzLri3KR2dUir9LU1aktXOMG4NZnbJsKPIrRTLzNTqpsPBxKe
+9bv8yH0Rh9TxkbedBpkonKeQiDWXZf2p8OokTzFoD2dZuG+GYGOnFTvbhbsy09M
sxJmzwPu7Idba9hHRxMzFG5Ul/vvSryNwHSlyFEraFW8GxnbryhLbedEh0RDFDNY
s34iANwPEkJ74NeCEwUn+fH/3I4VVbCmCeD/Z4NanXWElgsH21m8j0zP0JH6SjKE
LjX+ZfGTvQ==
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:30:32 2025 by rpki-client